Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          uJRZDcMO65yrHNsXqoUmljwYKkkKGYMe3FJAN6HTEgw=
Subject key identifier:   50:05:B9:BC:0B:21:26:84:9B:EC:B1:45:6D:99:BA:69:7C:E4:ED:58
Certificate issuer:       /CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
Certificate serial:       0E83BE911EF1F63B86F7654149543D3FF01CCB17
Authority key identifier: F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 01 Jun 2022 18:59:39 +0000
ROA not before:           Wed 01 Jun 2022 18:54:39 +0000
ROA not after:            Wed 31 May 2023 18:59:39 +0000
asID:                     399970
IP address blocks:        2602:fc3b:400::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:83:be:91:1e:f1:f6:3b:86:f7:65:41:49:54:3d:3f:f0:1c:cb:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
        Validity
            Not Before: Jun  1 18:54:39 2022 GMT
            Not After : May 31 18:59:39 2023 GMT
        Subject: CN=5005B9BC0B2126849BECB1456D99BA697CE4ED58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2a:12:1c:ce:d2:df:b7:9d:e2:22:55:86:0b:
                    92:6b:f3:b1:85:21:18:e8:8d:f1:9c:32:8b:d8:6d:
                    da:08:d1:c5:25:74:00:3c:ec:e6:c7:b2:e1:0c:6a:
                    1e:f5:33:2a:a4:17:cc:dc:4d:f8:17:ad:4a:03:3d:
                    f4:60:ce:ae:39:30:d9:1e:ce:c8:39:df:8f:e2:c5:
                    e1:89:36:c1:4e:02:5a:81:e0:0a:13:65:2d:ac:36:
                    19:45:55:88:93:fd:f4:46:5d:ca:f8:66:ea:20:c2:
                    c8:c2:e0:c5:67:3b:bd:93:bf:c9:d8:11:83:80:72:
                    28:45:43:c8:9f:e4:4f:69:96:06:97:90:db:29:1b:
                    6c:f7:66:e6:21:56:32:77:72:f7:60:74:22:77:df:
                    66:a9:37:2d:78:b4:9c:9a:cf:c5:03:5f:86:e3:55:
                    f4:9a:ad:af:1d:1d:9f:86:58:7a:79:13:dd:d1:ba:
                    82:26:36:55:8c:70:47:af:f7:ab:64:82:fd:97:a7:
                    10:f0:e3:5b:d5:7b:4a:14:b2:fc:20:1f:a2:1c:94:
                    30:69:c2:84:13:8a:d0:a9:0f:70:1d:eb:78:8b:ba:
                    52:c3:b3:77:ed:e8:17:5a:56:f3:23:44:ef:8b:1b:
                    96:91:bc:63:ad:37:aa:9a:0e:a9:28:0d:b7:53:01:
                    a2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:05:B9:BC:0B:21:26:84:9B:EC:B1:45:6D:99:BA:69:7C:E4:ED:58
            X509v3 Authority Key Identifier:
                keyid:F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/F4A4FB0FBD329CDFC565464966CF1319469E33B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:36:fc:01:15:d6:1e:30:f5:a8:a2:c7:a7:60:07:5d:bb:3a:
         c3:d2:ea:e0:0e:9f:05:f7:52:d6:4c:55:4c:a8:e2:52:d2:1d:
         77:b4:c3:dd:28:95:aa:cc:50:ae:3d:b7:45:77:44:20:1a:06:
         a3:9f:57:2a:29:a0:a4:d1:3f:04:83:ae:c9:af:cf:dc:96:a7:
         9f:d0:f7:13:13:d3:40:a9:5d:1c:3d:2c:c0:03:b8:1e:c2:3b:
         f5:04:10:30:ed:66:5c:1c:c5:29:65:c9:54:cc:37:40:93:7b:
         c0:c1:20:63:79:19:55:f1:75:c0:5d:63:61:f4:7b:d5:e5:03:
         75:cc:04:67:a0:db:74:90:75:b7:d0:51:26:13:0b:ed:aa:c2:
         5c:2a:64:1a:80:7d:17:e1:3a:7f:a3:e5:a7:65:00:a4:d5:9e:
         80:a0:4d:be:e0:ae:16:dc:e8:9a:95:09:03:1e:7b:ad:b6:ee:
         fe:11:ff:97:84:38:6b:8e:77:f1:0d:eb:76:f6:e5:fc:ed:7c:
         40:e0:98:6e:69:53:a5:f8:da:00:24:24:b1:28:64:e9:a1:67:
         fb:d1:c8:6d:ab:76:38:8b:79:c0:79:30:3f:c6:5a:36:f1:71:
         c6:4e:0e:ae:e8:a0:44:e9:cc:a0:be:c2:43:b1:b3:b7:32:2f:
         99:14:cf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----